SentinelOne (S) Q4 2025 Earnings Call Transcript

SentinelOne (S 2.93%)
Q4 2025 Earnings Call
Mar 12, 2025, 4:30 p.m. ET

Contents:

• Prepared Remarks
• Questions and Answers
• Call Participants

Prepared Remarks:

Operator

Good afternoon. Thank you for attending today’s SentinelOne Q4 fiscal year 2025 earnings conference call. My name is Jaeleen, and I will be your moderator for today. All lines will be muted during the presentation portion of the call with an opportunity for questions and answers at the end.

I’d now like to turn the conference over to our host Doug Clark, the vice president of investor relations. Doug, you may proceed.

Doug Clark — Vice President, Investor Relations

Good afternoon, everyone, and welcome to SentinelOne’s earnings call for the fourth quarter of fiscal year 2025, which ended January 31st, 2025. With us today are Tomer Weingarten, CEO; and Barbara Larson, CFO. Our press release and an earnings presentation were issued earlier today and are being posted on the investor relations section of our website. This call and accompanying slides are being broadcast live via webcast, and a replay will be available on our website after the call concludes.

Before we begin, I would like to remind you that during today’s call we will be making forward-looking statements about future events and financial performance, including our guidance for the first fiscal quarter and full fiscal year 2026, as well as long-term financial targets. We caution you that such statements reflect our best judgment based on factors currently known to us and that actual events or results could differ materially. Please refer to the documents we file from time to time with the SEC, in particular, our annual report on Form 10-K and our quarterly reports on Form 10-Q. These documents contain and identify important risk factors and other information that may cause our actual results to differ materially from those contained in our forward-looking statements.

Any forward-looking statements made during this call are being made as of today. If this call is replayed or reviewed after today, the information presented during the call may not contain current or accurate information. Except as required by law, we assume no obligation to update these forward-looking statements publicly or to update the reasons actual results could differ materially from those anticipated in the forward-looking statements, even if new information becomes available in the future. During this call, we will discuss non-GAAP financial measures unless otherwise stated.

These non-GAAP financial measures are not prepared in accordance with generally accepted accounting principles. A reconciliation of the GAAP and non-GAAP results, other than with respect to our non-GAAP financial outlook, is provided in today’s press release and in our earnings presentation. These non-GAAP measures are not intended to be a substitute for our GAAP results. Our financial outlook excludes stock-based compensation expense, employer payroll tax on employee stock transactions, amortization expense of acquired intangible assets, acquisition-related compensation costs, restructuring charges, and gains on strategic investments, which cannot be determined at this time and are, therefore, not reconciled in today’s press release.

And with that, let me turn the call over to Tomer Weingarten, CEO of SentinelOne.

Tomer Weingarten — Chief Executive Officer

Good afternoon, everyone, and thank you for joining our fiscal fourth quarter earnings call. Fiscal year ’25 was a transformative year for SentinelOne, ending with a strong Q4 that exceeded our expectations across all guided metrics. For the full year, we also successfully met or exceeded the guidance targets that we set at the start of last year. Notably, we reaccelerated second half net new ARR growth back into positive territory.

This performance was fueled by strong win rates, disciplined execution, and the growing adoption of our platform solutions, particularly in data, AI, and cloud. Once again, we delivered industry-leading revenue growth and margin improvement. We were one of the only software companies at scale to achieve over 30% top-line growth while driving over 15 percentage points of operating margin expansion. Additionally, we set a new customer growth record and scaled our emerging platform solutions to new highs with known endpoint solutions crossing 50% of our full year bookings.

We successfully transformed our business from an endpoint-focused model to a comprehensive leading AI native cybersecurity platform. At the same time, we accelerated our time to profitability through focused investments and discipline. We achieved significant profitability milestones, including our first quarter of positive operating income in Q4, well ahead of our expectations; our first full year of positive net income and earnings per share; and our first full year of positive free cash flow. With these results, we’ve crossed a key inflection point, and we believe the company is well positioned for sustained growth and profitability at scale.

We expect to surpass 1 billion in both ARR and revenue this year, an important milestone in our growth journey. We also expect to achieve full year operating income profitability while continuing to invest in our platform and future opportunities. In fiscal year ’26, we remain focused on execution and advancing Singularity as the preeminent AI-powered cybersecurity platform for the future, which brings me to the state of the market. In many ways, the cybersecurity status quo was a disappointment in 2024.

More breaches, more costs, and more data was stolen than ever before; personal data, financial data, healthcare data, and the list goes on. Our entire world is now digital, and these breaches are challenging that very basic fabric. Furthermore, AI is no longer experimental. And in the hands of attackers, it’s a real threat.

The scale, automation, and speed of attacks are accelerating. Looking ahead, we must redefine the security landscape with a modern approach. Our industry cannot afford to rely on the same outdated approaches of the past two decades. They simply don’t work.

Our AI native autonomous security is fundamentally redefining how cybersecurity challenges are addressed, setting us apart in the industry. Enterprisewide security, unified data, and AI are the core pillars of every solution within the Singularity platform. Today, I’m excited to announce that we’re the first company to embed foundational generative AI capabilities into every platform solution by default, end point, cloud, data solutions, and more. From the beginning, we introduced an AI-based approach to endpoint security.

A decade later, we remain at the forefront of innovation, pioneering the use of generative and agentic AI to transform enterprisewide security applications. We’re harnessing AI to empower humans and automate defenses at scale. This is how we elevate cybersecurity for enterprises and help them become exponentially better. As a company, we are nimble and adaptive, a key competitive advantage compared to other incumbents.

We can leap, not just take steps forward. And this year, we’re leaping forward to where the future is going to be. We have an incredible opportunity ahead to collaborate with our customers, partners, and enterprises worldwide to usher in the new era of cybersecurity with Singularity. Our success stems from our focused innovation strategy and technology leadership.

Let me cover that in more detail. Three things set our Singularity platform apart. One, unified defenses, the only open unified AI security platform integrating data, endpoint, cloud, identity, and third-party solutions for broad and complete coverage and protection. Two, outpace threats.

Autonomous security and industry-leading signal-to-noise ratio delivers real-time protection and actionable insights to stay ahead of threats. And three, enhanced security analysts. Our generative and agentic AI set the standard in defending against modern threats. Designed to evolve and constantly adapt, Singularity helps move faster, more efficiently, and save cost.

Take a look at the latest MITRE attack evaluations, the industry’s gold standard for comparing and contrasting performance across security vendors. For the fifth consecutive year, singularity achieved 100% detection. It’s also important to take a more detailed look at the results beyond the detection score. This is where the true differentiation emerges.

The latest MITRE evaluation introduced new performance criteria for both detection delays and alerts. Singularity delivered zero detection delays and 88% fewer alerts compared to competing solutions. The relative outperformance of singularity is impressive. Competing vendors required four times, eight times, or, in one case, 9,000 times more alerts.

With SentinelOne’s industry-leading signal-to-noise ratio, enterprises don’t have to compromise between protection, reliability, and noise. Detections are real time with the Singularity platform, eliminating gaps and ensuring enterprises stay ahead of evolving threats. Our emphasis on quality over quantity minimizes alert fatigue and enables security teams to remain focused and effective against adversaries. Put simply, our AI-driven security approach simplifies and streamlines operations.

We’re focused on delivering the best solutions that address the most critical enterprise needs. Our platform solutions fall into seven key categories, namely, AI and automation; data, endpoint, cloud, and identity security; exposure management; and threat services. Each of these seven solution categories encompasses multiple individual product offerings, collectively addressing over 30 distinct use cases. As an example, our cloud security solutions represent one of the broadest portfolios in the industry, covering cloud workload protection, CSPM, CIEM, AI-SPM, cloud data security, and more.

This extensive coverage highlights the depth and versatility of the Singularity platform, delivering AI native cybersecurity across diverse environments. Importantly, all of our platform offerings are powered by the unified Singularity data lake and integrated with AI and hyperautomation capabilities. We’ve experienced robust adoption and expansion of our platform solutions over the past two years. As of this quarter, we’ve tripled the number of customers with three or more solution categories and quadrupled the number of customers with four or more solutions.

I’m also excited to share that about 40% of our enterprise customers have adopted three or more platform solutions and about 20% have adopted four or more solutions. This incredible progress and customer receptivity illustrates the diversity and growth potential of our business. In fiscal year ’25, over 50% of our bookings came from known endpoint solutions. This milestone shows our ability and momentum to disrupt large markets with leading technology.

We’ve just begun to scratch the surface of an immense $100 billion market opportunity. In Q4, we achieved record bookings contribution from our data, cloud and AI security solutions, once again, showing the accelerating adoption of our broader platform. Data and AI were our fastest-growing solutions fueled by adoption of our Singularity AI SIEM. Our AI SIEM is redefining security data management with enhanced visibility, real-time detection, on-streaming data, accelerated investigations, and autonomous responses.

Many of our largest and most strategic wins in the quarter included AI SIEM, alongside broader platform solutions. Let’s look at a few examples. A customer with an eight-figure total deal value in the APAC region expanded endpoint and cloud coverage added CNAPP and fully replaced the legacy SIEM with AI SIEM, a true platform win. Next, a leading financial institution switched from Splunk to AI SIEM, reducing costs and improving performance.

The multi-million dollar deal increased the customer size by 5x. Finally, in another multi-million dollar expansion, one of the largest retailers in its category selected AI SIEM to replace an incumbent vendor, which resulted in savings of more than $1 million per year for this customer. By combining AI SIEM with adjacent Singularity solutions, this enterprise can now detect and respond to incidents up to 12 hours faster than before. Customers are starting to migrate away from legacy SIEM products and modernize their infrastructures.

We’re partnering with them at their pace. The momentum is clear. As we engage in more strategic large enterprise conversations, we’re building trust and long-term relationships. We’re listening to customer objectives and helping them solve their security and data challenges.

In Q4, we welcomed one of the largest airlines in the world, a Fortune 100 company that chose SentinelOne to replace their leader incumbent and one vendor. After six months of engagement and support by the SentinelOne team, this enterprise adopted the Singularity platform across their network to improve security and resilience. Q4 was one of our strongest quarters of competitive displacements. Still, large scale security decisions, evaluations, and dealer engagements take time and careful consideration.

The market interest and customer engagements are strong, opening new opportunities for SentinelOne, all contributing to our expanding pipeline. Turning to our partners. We’re also seeing increased interest from managed security, incident response, and insurance providers for our broader platform solutions. In Q4 alone, more than a dozen large partners started adopting AI SIEM, Purple AI, CNAPP, and more.

In particular, MSSPs remain a strong driver of growth and opportunity. They are doubling down with SentinelOne, embracing more of the platform and establishing longer-term contracts. This benefits us and our partners with more visibility and predictability into future growth. Our long-standing partnerships with managed service providers are built on collaboration and innovation, multi-tenancy, automated response tools, and rollback capabilities enhance their own service offerings.

Now, with AI SIEM, Purple AI, and CNAPP, we’re taking this to the next level, helping them consolidate security coverage into a single console powered by our leading AI innovations in highly efficient data ingestion and analytics. Let’s also discuss the latest innovations across our solutions, starting with Purple AI. We believe every customer should be able to leverage generative AIs foundational abilities for security applications. After a year of customers selecting and using Purple AI, it’s clear how much it can scale and automate time consuming human tasks.

We’re now the first security company to include foundational gen AI security capabilities like natural language queries and auto generated summaries across our platform by default. This is just the first step in redefining today’s categories of EDR, cloud security, and SIEM to be AI-powered, bringing advanced agentic capabilities to not just hundreds of enterprises but thousands. The inclusion of Purple AI foundations across the Singularity platform sets the baseline for AI usage, driving immediate engagement and fueling adoption of more platform solutions. More advanced agentic AI workflows or Purple are available to further enhance speed and performance.

Additionally, we’re extending the power of Purple AI across a wider range of security data. We’ve added support for third-party solutions, including Zscaler, Okta, Palo Alto Networks, Fortinet, Microsoft, and others. By breaking data silos, customers can unleash the full power of Purple AI across their entire security infrastructure. We’re committed to an open platform that can seamlessly co-exist and orchestrate a broader ecosystem of security solutions.

Purple is already the first and only scaled agentic AI for cybersecurity, Purple plus hyperautomation are the bedrock for agentic AI in cybersecurity. We believe this will become table stakes for autonomous security in the coming years. This is the future, and we’re extending our lead. In cloud security, we continue to gain traction with new and existing capabilities.

More enterprises are securing their cloud environment with our leading cloud workload security and CNAPP capabilities. In Q4, we secured our largest CNAPP deal since the acquisition of PingSafe. In a multi-million dollar opportunity, a leading software company adopted several platform solutions, including workload security and CNAPP after a rigorous competitive evaluation. Singularity was selected for best-in-class performance, unified capabilities, and lower cost of ownership compared to point solutions.

The success of our cloud security platform is further validated by customer testimonials and third-party accolades. During the quarter, SentinelOne was named a 2024 Gartner Peer Insights Customer Choice for CNAPP. We received the highest number of customer responses in the Voice of the Customer with 98% of customers saying they would recommend us to their peers. We were also awarded the best overall cloud and application security offering in CRN’s 2024 Product of the Year.

As we turn to a new fiscal year, let’s look at the broader market dynamics and our strategic focus for the path forward. Our technology, scale, and market presence are better than ever. We delivered consistent improvement throughout the year in customer growth, retention, and platform adoption, and we’re seeing increased partner and customer interest in SentinelOne. Broadly, AI is impacting how companies make decisions and implement technology.

It’s appending what we know about software and software development. The world of technology and software is rapidly evolving and so are we as a company to lead in the future of AI-powered cybersecurity. This involves focusing our resources and aligning teams toward key growth areas. We’re sharpening our innovation focus toward AI native data and security solutions.

We must also remain mindful of the macro environment. For many organizations, economic and political uncertainty continues to impact budget, timing, and business decisions. As we enter fiscal year ’26, our product, sales, and marketing teams are fully aligned to expand on the reach and scale of our platform through new customer growth and expansions. We’re focused on strong execution and deeper engagement across our partner ecosystem.

We believe this positions us well to drive premium growth while continuously improving margins in the years to come. We’ve achieved a lot in the past year, from delivering industry-leading growth and margin improvements, to bringing cutting-edge innovations to the market, and most importantly, keeping our customers secure. I’m proud of all Sentinels for their dedication and relentlessness over the past year and for their enthusiasm for what’s to come. In closing, I want to extend my thanks and gratitude to our customers and partners for their trust in SentinelOne.

Congratulations to all Sentinels. Their hard work and commitment drives our success and helps secure tens of thousands of businesses around the world. And thanks to our shareholders for their continued support. Our mission to be a force for good remains unwavering.

With that, I would like to turn the call over to Barbara Larson, our chief financial officer.

Barbara Larson — Chief Financial Officer

Thank you, Tomer, and thanks to everyone for joining us today. Let’s review the details of our Q4 and fiscal year ’25 financial performance and our guidance for Q1 and fiscal year ’26. As a reminder, all comparisons are year-over-year and financial measures discussed here are non-GAAP, unless otherwise noted. We continued to deliver industry-leading growth and margin expansion in fiscal year ’25.

Our revenue grew 32% to 821 million, while gross margin reached a new full year high and operating margin improved by 16 percentage points year over year. In addition, we crossed two important profitability milestones this year, delivering a positive net income margin of 2% and a positive free cash flow margin of 1% for the full year. Our profitability improvements are driven by increasing scale, operational efficiencies, and a disciplined investment strategy. We will continue to build on this and improve our profit and free cash flow margins in fiscal year ’26.

Turning to our fourth quarter results. Our overall performance signifies a strong competitive position and demand for SentinelOne’s best-in-class cybersecurity solutions. We are taking market share and mind share from incumbents and next-gen vendors alike. Q4 revenue of 226 million grew 29% year over year and exceeded our expectations.

This outperformance was driven by strong new business growth and linearity in the quarter. Revenue from international markets grew 36% and represented 37% of our quarterly revenue. In Q4, we added net new ARR of 60 million, and our total ARR grew 27% to 920 million. We delivered on our goal to reaccelerate net new ARR growth in the second half of the year, achieving 2% growth, an improvement of 12 percentage points compared to the first half of the year.

This performance improvement was driven by improved execution, a stronger competitive position and success across our platform solutions, notably cloud, data, and AI. Our Q4 competitive win rates were strong and improved compared to prior quarters. Exiting fiscal year ’25, we’re now protecting over 14,000 direct customers. Keep in mind, this does not include the thousands of businesses served by our strategic partners like MSSPs.

In Q4, we continued to solidify our leadership position with MSSPs. We have established deeper relationships and long-term growth commitments with leading MSSP partners. These strategic partnerships provide visibility into our mutual growth and success. This contributed to the strong RPO growth in the quarter, which reaccelerated to 30% growth and reached a new record of 1.2 billion.

In addition, we’re seeing success with both new and existing customers. Customers with ARR of $100,000 or more grew 25% year over year in Q4 to 1,411. This reflects more than 100 customer additions quarter over quarter, the largest net adds for the year. Our average deal size and ARR per customer continue to increase as well, highlighting our platform momentum and ongoing move upmarket.

We continue to maintain healthy expansion rates. And for the full year, we achieved a dollar based net retention rate of 110%. Even as enterprises navigate a challenging macro environment, they continue to embrace more of the Singularity platform. Beyond the top-line growth and customer momentum, we delivered record profit margins in Q4.

We achieved our first quarter of positive operating margin, outperforming our prior guidance by over 400 basis points. This outperformance was driven by cost discipline in the quarter and our focused investment strategy. Turning to our guidance for Q1 and fiscal year ’26. This year, we expect to surpass $1 billion in both ARR and revenue.

We also expect to deliver our first full year of positive operating margin. To be specific, we anticipate revenue of 1.07 billion to 1.12 billion, representing 23% growth. While we typically do not comment on an ARR outlook, this quarter, we believe it may provide helpful context around our growth expectations. For fiscal year ’26, we expect to deliver approximately 200 million in net new ARR, growing about 2% year over year.

This positive trajectory builds on our reacceleration in recent quarters, continuing our growing market presence and platform adoption. At the same time, we’re mindful of macroeconomic conditions, deal timing, and federal spending uncertainty. In addition, we’re focused on delivering efficiencies, and that means prioritizing our investments in data, cloud and especially AI. As a result, we made the strategic decision to retire our legacy deception solution.

Our outlook includes up to $10 million of expected churn from the retirement of deception with nearly half of that impacting Q1. Excluding this impact, we expect our full year net new ARR would increase by a mid to high single-digit percentage year over year. For Q1, we expect revenue of approximately 228 million, growth of 22% or 24% when normalizing for the leap year benefit from last Q1. Additionally, we expect Q1 net new ARR in the low $30 million range.

Our Q1 expectations include the impact of the retirement of our legacy deception solution. Excluding this impact, we would expect our net new ARR to be approximately flat year over year. Turning to our outlook for margins. We expect to maintain industry-leading gross margins as we grow our customer and platform base.

We expect Q1 gross margin to be about 79%. And for the full year, we expect gross margin to be between 78.5% and 79.5%. For operating margin, we expect Q1 to be about negative 2%, implying a year-over-year improvement of approximately 400 basis points. For the full year, we expect operating margin to be between positive 3% and 4%, an improvement of over 650 basis points at the midpoint compared to fiscal year ’25.

In addition, we expect our full year free cash flow margin to be several percentage points higher than operating margin, as we continue to improve our profitability and cash flow profile. As we shift toward generating more meaningful positive free cash flow, we still have over $1.1 billion in cash and cash equivalents, which provides ample flexibility as we invest in and scale the business. Taking a step back, our momentum, technology leadership and competitive position remains strong, and we’re committed to delivering ongoing leverage in the business as we execute our growth strategy. Our investment approach strikes a thoughtful balance between maximizing long-term growth opportunities and maintaining a strong, responsible, and profitable financial profile, a strategy that’s key to scaling SentinelOne to a multi-billion dollar business.

At the same time, we’re instilling operational discipline by identifying ways to enhance efficiency and productivity. One example is the prioritization of investments toward AI-powered security and data. In addition, we are optimizing our facilities footprint and aligning resources to strategic growth areas. These enhancements make us more nimble while freeing up investments in our key growth priorities of data, cloud and AI, all while delivering additional margin expansion this year.

Our goal is to deliver growth at scale, while continuously improving operating and free cash flow margins over time. Thank you all for joining us today. We will now take questions. Operator, please open up the line.

Questions & Answers:

Operator

[Operator instructions] Our first question comes from Adam Tindle with the company, Raymond James. Adam, your line is now open.

Adam Tindle — Analyst

OK. Thanks. I’m going to ask one, but it’s going to be multi-part. I’m going to try to beat up net new ARR right out of the box here, so bear with me.

Appreciate the highlight that net new ARR, flipped back to positive for the back half. But if we’re looking at just Q4, it was, you know, flattish on easier comparison. So, just rationale for that in Q4. And then, Barbara, as we look to fiscal ’26, it was helpful to get that color on total ARR growth.

I guess the question would be on that starting kind of flattish, I think if I backed out the retirement of the product you mentioned and needing to grow low single digits for the year as the comparisons get tougher throughout the year, what kind of gives you the confidence to come out here with that, you know, back-half tougher comparisons and with this ramp throughout the year? Thank you.

Tomer Weingarten — Chief Executive Officer

Thanks, Adam. So, let me actually address that first. So, in fiscal year ’25, we delivered revenue growth of over 30%, and that is with full year profitability. The win rates remained really strong, pipeline is growing, we’re seeing interest from new and larger enterprises.

That just means more awareness for SentinelOne than ever before. We’re also seeing very strong adoption from all of our platform capabilities [Inaudible] let me try and repeat that. OK, let’s try one more time. OK, that should work.

So, once again, in fiscal ’25, you know, we delivered revenue growth of over 30%. That’s industry-leading with full year profitability, with really strong win rates, pipeline growing, interest from new larger enterprises. That just means more awareness for SentinelOne. And we’re seeing very strong adoption from all of our platform capabilities.

If you kind of think about that with successfully reaccelerating our net new ARR growth in the second half of the year, for FY ’26, we expect to grow that meaningfully if you adjust it for the deception end of sale. That will be mid, you know, mid to high growth single digits. So, we feel confident in the opportunity and the trajectory. I think the underlying strength of the business, you know, is somewhat masked by that end-of-life decision, which we believe is the right decision longer term.

And all in all, the guide gives, I think, you know, a good achievable starting point for us as we execute throughout the year.

Barbara Larson — Chief Financial Officer

And then, I’ll just follow-up with the question on Q4 ’25. We did have some impact from churn in this Q4 related to deception. And if we adjust that out, our Q4 net new ARR would have grown in mid single digits.

Operator

Our next question comes from Brian Essex with the company, JPMorgan. Brian, your line is now open.

Brian Essex — Analyst

Hi. Good afternoon. Thank you for taking the question. I was wondering if maybe sticking on the topic of ARR or net new ARR, how you’re thinking about contribution from Lenovo? Are you starting to see some traction? Is it — are they selling devices? I think you previously talked about maybe in the back half of the year.

Just wondering about visibility into that relationship and how that might impact — how you’re thinking about guide for the year.

Tomer Weingarten — Chief Executive Officer

We’re working very closely with the Lenovo team. All of the go-to-market elements are now being put in place. And as I’ve said before, we expect that impact to be much more back-end loaded, mostly, I would say, even in the next fiscal year, as more on the box shipments are starting to get out the door. So, everything we know, understand, and want to take into this year is factored in the guidance.

We believe the Lenovo, which is a multiyear relationship with ramp baked into it, is going to be much more meaningful in the out years versus in this immediate fiscal year.

Brian Essex — Analyst

OK. Great. Thank you. I’ll keep it one and follow up afterwards.

Thank you.

Operator

Our next question comes from Gray Powell with the company, BTIG. Gray, your line is now open.

Gray Powell — Analyst

Great. Thanks for taking the question. So, maybe one for Barbara. You’ve been at SentinelOne a little over six months now.

It’s your first time owning the guide for the full year. Are there any material changes that you’re making? Are you looking at any different KPIs or just any difference with regards to your guidance philosophy versus your predecessor?

Barbara Larson — Chief Financial Officer

Yeah, Gray. Thanks so much for the question. In terms of the guide, we really feel like this is the right starting point for the year. We’re focused on setting reasonable expectations that reflect the potential that we see in the business.

Of course, it’s based on what we have line of sight to pipeline activity, contributions from new products, anticipated conversions and win rates. You know, we’re mindful of the macro as well. It’s not extremely different than what we’ve seen recently. It just continues to persist, it’s still volatile.

It’s almost like it’s the new normal. But we do believe this is the right starting point for this year.

Gray Powell — Analyst

Understood. That’s very helpful. Thanks.

Operator

Our next question comes from Joseph Gallo with the company, Jefferies. Joseph, your line is now open.

Annick Baumann — Jefferies — Analyst

Hi, guys. This is Annick Baumann on for Joe Gallo. Tomer, you guys have put a ton of work into your go-to-market engine, and I’m just curious if there’s any more tweaks as you begin to work through FY ’26. And how do you think about capacity and hiring in the context of looking to reach over 1 billion in ARR this year?

Tomer Weingarten — Chief Executive Officer

Thank you for the question. There’s always evolution happening. I mean, we are working on better productivity. We’ve improved productivity year over year.

We are gearing toward more platform sales. We’re adjusting our pricing structures. I mean, we’re allowing for even more flexibility for our customers, and we’re aligning with some of the pricing structures that we’re seeing out there. So, all in all, you know, we’re in this evolution of go-to-market, every indicator that we track is looking better, and that’s reflected through win rates, that’s reflected through, you know, channel contribution.

And we’re obviously working with more and more automation throughout pretty much every avenue we have. All of those should be, you know, somewhat of contributors in this fiscal year, but the vast majority of it is really a poor contribution for the out years and strategic decisions we’re taking right now to continue and sustain growth in the years to come.

Doug Clark — Vice President, Investor Relations

Operator, I want to jump in here for a second. We’re under the impression that folks on the webcast could not hear the first question or the response. So, I just want to repose it and allow Tomer and Barbara to answer. It was a question about ARR growth expectations for fiscal ’26, as well as Q4 fiscal ’25.

Tomer, if you want to address that again?

Tomer Weingarten — Chief Executive Officer

Yes, of course. So, in fiscal ’25, as I mentioned, we continue to deliver leading revenue growth in the industry, over 30%. Win rates remained really strong, and our pipeline is growing even further. We see a lot of interest from new and larger enterprises, and this just means more awareness for SentinelOne than ever before.

There’s strong adoption of our platform solutions. We’ve quadrupled the number of customers on the enterprise that are using one or more — sorry, four or more modules by SentinelOne. And we successfully reaccelerated and improved net new ARR growth in the second half of full year ’25. In FY ’26, we expect to grow net new ARR as well.

And if you adjust it for the end-of-sale decision that we’re taking here, it would actually be up mid to high single digits. So, we feel very confident in the opportunity and the trajectory. I just feel like the underlying strength of the business, if you kind of think about it as new and upsell is just very strong. And it’s being masked a bit by that end-of-life decision, which is a longer-term decision that we believe is necessary.

You know, there’s a lot of change happening in software today. But I feel like for us, this focus on data and AI mandates starting to prune away some of the legacy capabilities. I believe a lot of companies should be going down that path. So, for us, that’s the focus.

The underlying strength of the business, you know, coupled with obviously strategic long-term decisions.

Barbara Larson — Chief Financial Officer

And then, following up on Q4 ’25, we delivered flat year-over-year net new ARR in Q4 as planned. We did have some impact from churn related to the retirement of our legacy deception solution. To the extent that we adjust that out, our Q4 net new ARR would have grown in mid single digits in Q4 ’25.

Doug Clark — Vice President, Investor Relations

Thank you, operator. We can go to the next question, please.

Operator

Our next question comes from John DiFucci with the company, Guggenheim Securities. John, your line is now open.

John Difucci — Analyst

Thank you. So, this quarter, forgetting even about the deception product and some attrition because of that. If I look at just new ARR and I take into account normal attrition, which I know is really small, it actually grew a little bit, which is I think about half of companies actually showed growth in new ARR, only about half. And, Barbara, thanks for all that color on the guide, which makes me think I might be able to answer this, but let me ask it anyway.

You talked about the assumptions on the demand environment or the macro, and you said about new normal. And so, I’m thinking you’re thinking, OK, the backdrop is consistent. But this implies your guidance that you expect SentinelOne to perform better against that backdrop, a little bit, not a ton. And I know you want, you know, to beat your number, hit your goals or exceed them.

So, can you expand a little bit more, just a little more color as to why you think you’re going to perform a little bit better this year than you did last year? And I’m thinking about new ARR. Thanks.

Barbara Larson — Chief Financial Officer

Thanks, John. I appreciate the question. So, if you kind of step back a little bit and you look first at fiscal year ’25, we did improve our new business growth in the second half of fiscal ’25. We expect this trend to continue into FY ’26 where we expect full year net new ARR to be up 2% year over year, so at around 200.

And that is including impact of the $10 million — about $10 million of churn related to deception. So, deception is a bit of a headwind. More than — or about half of that will occur in Q1. So, a headwind kind of front loaded, and then, we would expect our net new ARR growth sequentially to improve from thereafter.

Tomer Weingarten — Chief Executive Officer

Yeah. And maybe let me add a couple of points there, John. I mean the one thing that obviously is very different for us is just the adoption of the platform modules. If you couple that with the ramped sales force, I think we’re entering this year on a much stronger note.

AI is going to be a tremendous driver, and I think everybody understands already. Just to give you some context there, we’ve done more than 300 AI deals in Q4. I mean that is most likely more than any other security vendor out there. And we definitely see more traction for these solutions.

Now, obviously, we’re accounting for some of the things that we are pruning away. But all in all, we feel like there’s, you know, quite a bit of momentum in the business. Our pipelines point to that. Again, the maturity of the sales force, all of those, I think, are the contributing factors.

And then, I think that what allows Barbara, not to put words in your mouth, you know, to really put kind of an achievable bar or a good starting point for the year for us.

John Difucci — Analyst

Thank you. That all makes sense. Appreciate the color.

Operator

Our next question comes from Jonathan Ho with the company, William Blair. Jonathan, your line is now open.

Jonathan Ho — William Blair and Company — Analyst

Hi. Good afternoon. Could you maybe give us a little bit of additional color in terms of your exposure on the federal government side and, perhaps, what you’re seeing in terms of, you know, what your customers are saying or what your sales force is saying there? Thank you.

Tomer Weingarten — Chief Executive Officer

Yeah. There’s definitely a level of unknown and uncertainty. There’s no question that there’s a lot of change that’s happening. With that, we’ve actually seen our federal pipeline expand.

So, there’s definite — it’s a definite source of demand for us. I would also say, you know, for the type of offering that we can cater to for federal agencies, and especially given that we’re one of the only security vendors that can sell AI into a FedRAMP High type of an environment. In many cases, we actually create cost synergies. We allow these agencies to actually save on their data ingestion costs.

We allow them to save on operational costs, and that positions us really well even in a macro in that arena that cause for more cost saving and prudence. So, all in all, I think we’re still treating federal as a source of strength. At the same time, I would say, there is maybe some unclarity on deal timing and budgets, and we’re just working at the pace of the customer, but demand remains strong.

Operator

Our next question comes from Shaul Eyal with the company, TD Cowen. Shaul, your line is now open.

Shaul Eyal — Analyst

Thank you. Hi. Good afternoon. Tomer, I had a question on deception.

What’s driving that decision? And maybe is some of deception capabilities from a product perspective are being displaced by some of the Singularity AI-driven capabilities?

Tomer Weingarten — Chief Executive Officer

Yes. Thanks for the question, Shaul. The biggest thing with deception is just it’s a legacy code base that we acquired, you know, with Attivo. As a matter of fact, it actually has even hardware components.

For us, that’s obviously not a long-term business we want to be in. And the cost of maintenance is creeping up while the ROI is not really showing up. So, for us, it’s a very simple decision of realigning resources into the high yielding elements of our business. And to the latter part of your question, AI is most definitely going to be a consolidator of capabilities.

And I think deception is one of them to a certain extent. You can think about identity. You can think about many elements of the broader security platform you’re seeing out there as capabilities that can be delivered as agentic AI instead of a fully fledged product. And I think that’s what we’re seeing is the progression, at least of our Purple AI capability set.

That’s why we’re already including it in most of our Singularity offerings. We believe philosophically that AI, gen AI capabilities for software products are going to become table stakes. If you’re not going to have them, you’re going to be much less relevant, and we’re using that to seed growth to kind of get customers accustomed to it and to drive more usage while we build more and more tiers and more and more agentic capabilities. So, that’s what we see for the coming fiscal year, and that’s how we kind of couch all of it with that, you know, base.

The majority of it is deception. There’s a couple of other small components in there, but that’s just, I think, in a broader sense, how we’re thinking about the shift from legacy code bases, you know, to newer offerings, AI-based, which is something, again, I think you’ll start seeing a lot of other companies go down the path.

Operator

Our next question comes from Shrenik Kothari with the company, Baird. Shrenik, your line is now open.

Zach Schneider — Robert W. Baird and Company — Analyst

Great. Hi. This is Zach Schneider on for Shrenik. Thanks for taking the question.

So, obviously, your emerging product portfolio is becoming an increasingly critical growth driver. And you highlighted data and AI as your fastest-growing solution. But maybe are there any specific solutions that stand out in terms of adoption velocity, cross-sell success? Have there been any surprises, either outperformers, that are scaling faster than expected or areas where traction has been slower than anticipated? Would love to just get a sense of what’s working best and where there’s still white space to accelerate adoption. Thanks.

Tomer Weingarten — Chief Executive Officer

I definitely mentioned AI is one of these — Purple AI, you know, the capability, 300 deals in the quarter plus, I mean, that is remarkable. With that, you know, AI SIEM for us has also been a source of strength. So, the coupling of these two also just makes us much more strategic for these types of customers. So, I would definitely call out AI SIEM and Purple AI as the two main drivers of growth.

Cloud security for us, I mean, we started selling the complete unified cloud security suite for us. We’ve done, you know, a record deal with cloud security in Q4. So, all of those are really progressing nicely. And we will continue — I think, continue to drive those as the most strategic touch points with customers.

Zach Schneider — Robert W. Baird and Company — Analyst

OK. Thank you.

Operator

Our next question comes from Rudy Kessinger with the company, D.A. Davidson. Rudy, your line is now open.

Rudy Kessinger — Analyst

Hey, guys. Thanks for taking my question. I’m curious if you look at the second half of this year in net new ARR, obviously, it improved quite a bit from the first half. But if you were to maybe strip out some of the benefit from the displacements from CrowdStrike that were specifically due to the outage that would have otherwise likely not have occurred.

What would that second half net new ARR growth have looked like?

Tomer Weingarten — Chief Executive Officer

I’m not sure we can strip that out, and I’m not sure that you can think about it in such a distinct way. To us, and I mentioned it in the opening question, what is changing the most is consideration. And even customers that maybe chose to stay with the incumbent, they’re still entertaining and considering what they’re going to do next. So, a lot of folks are doing anything in an unplanned fashion.

But once they go through that cycle, you know, it could be one year or two years out sometimes, the consideration is very different. So, as I mentioned, to us, the way we look at it is something structurally had shifted. I think that creates more consideration for SentinelOne. And all in all, you know, I think that what we’ve seen is somewhat of incremental contribution.

I think it’s much more smoothened out than one would imagine. I think maybe folks were expecting some upticks. It’s not an uptick type contribution. It’s smoothened, it’s gradual, and we believe it’s also here to stay, which is the most important part.

Operator

Our next question comes from Tal Liani with the company, Bank of America. Tal, your line is now open.

Tal Liani — Analyst

Hi, guys. I wanted to just understand the guidance. So, your guidance is about 7 million, 8 million below the consensus and $20 million for the year. Guidance for the next quarter is 7 million, 8 million below.

And part of it is because of the deception, part of it is I’m trying to understand. So, can you quantify the deception — first of all, the deception impact on the guidance on the revenues, not on the ARR? And then, second, what are the good things and the bad things that drove you to kind of guide slightly below the Street? Because your message is very strong, and I can see the numbers in the historicals, but the numbers are slightly weaker. Thanks.

Barbara Larson — Chief Financial Officer

So, from a deception perspective, I’ll first cover that for net new ARR. So, for FY ’26, the impact is about $10 million of churn for the year. And Q1 is about half of that. On a revenue perspective for the full year, deception has about 1 point headwind on FY ’26 revenue.

Tal Liani — Analyst

Got it. So, the rest of it — the rest of the guidance, like, the slight weakness versus the Street, is there anything you want to highlight why you’re guiding below the Street? The growth rate is decelerating from last year. So what’s the source of this deceleration?

Tomer Weingarten — Chief Executive Officer

I think what we’re trying to factor at the end of the day is just, you know, the unknowns. And we truly believe this is a good starting point for us. There’s a lot of factors in play. There’s a lot of shifts happening in software.

We believe we’re making the right responsible decisions here. So, all in all, we’re just factoring in everything that we believe and know. And, you know, our goal is always to overachieve, and that’s going to be my job. Barbara sets the guidance, I try to overachieve it.

But all in all, we believe, again, that captures everything we know today.

Operator

Our next question comes from Eric Heath with the company, KeyBanc. Eric, your line is now open.

Eric Heath — Analyst

Hey, thanks for taking the question. Maybe just one housekeeping one. Just wanted to clarify deception and the decision to end-of-life that was factored in the guidance as of last quarter. And then, Tomer, the question I wanted to ask is on pricing.

You called out some adjustments to pricing. So, just curious if you could elaborate a little bit more about what that means and if it’s some sort of credit model that we’re seeing a lot of vendors do to enable more adoption, more modules across the platform. Thanks.

Barbara Larson — Chief Financial Officer

So I’ll cover the first one. We did factor that into the guidance. There was some churn in Q4.

Tomer Weingarten — Chief Executive Officer

And as for pricing, I mean, the first thing I’ll open and say is that pricing has been very stable for us. So, it’s not about discounting, and it’s not about, you know, needing to tweak our pricing model. But obviously, you know, customers are looking for more flexible ways to procure. And I think that’s where we, you know, don’t see a lot of downside in going down the path of allowing some of these more flexible terms, given that the expansion you seen in our capabilities set is significant.

I mean, our platform today is seven capabilities with about 30-something modules. That’s a lot. And customers like to try out a lot of different capabilities that we have. So, moving into a pricing model that allows them access to the entire platform is something that we believe is going to be a beneficial, and that’s the direction that we’re heading toward.

Operator

Our next question comes from Trevor Walsh with the company, Citizens. Trevor, your line is now open.

Trevor Walsh — Analyst

Great. Thank you for taking the questions. Tomer and team, I appreciate the new disclosures around a module or solutionary adoption that you overlaid across the seven. It’s great to see.

Just curious if that’s just more reporting for us here on this call or if you align the more solution selling orientation for the sales team, and if what playbooks you’re maybe running around, you know, grouping those together. And then, kind of on related lines, one of your peers/competitors has talked about within cloud security, kind of things moving more toward detection response, SIEM, the SOC taking over more of, I guess, like that whole kind of piece of the pie and that benefiting them and others like you have maybe a more runtime agent-based approach. So, kind of along the lines of just selling multiple pieces of the platform. Do you agree with where the things are going there in security, their cloud security specifically and how that all kind of aligns to kind of, again, what you’re doing from a larger selling multiple solutions across the platform? Thanks.

Tomer Weingarten — Chief Executive Officer

I think the biggest thing is that we want to provide flexibility. I think unlike some other vendors, we don’t force customers to take kind of an all or nothing approach. So, we have all the capabilities. We can, as an example, sell you a fully fledged cloud security suite that contains all the CNAPP capabilities and best-of-breed runtime workload protection.

At the same time, we don’t mind going into environment and delivering best-of-breed worker protection and working in tandem with another CNAPP provider. To us, it’s really about flexibility. And we’re seeing customers adopt more and more of our capabilities once they’ve experimented with at least one capability. Typically, you know, when you look at what we do, it’s almost always best of breed.

I mean you’re talking about Gartner customer choice for endpoint protection and customer Gartner customer choice for cloud security and Gartner customer choice for MDR and product of the year for AI. So, obviously, what we do is at the forefront in each and every one of these fields. And we have fully inclusive capabilities that are akin to every other platform — and every other leading platform, I should say, in the market today. But the emphasis is sell what customers need, sell to the need and sell to what they want to address today versus trying to deal with futures.

We’re definitely seeing the expansion coming as evidenced in the numbers, and that’s why we’re also moving toward those more flexible pricing platform structures that can allow customers to then, over time, consume more from our capability set.

Operator

Our last question comes from Andy Nowinski with the company, Wells Fargo. Andrew, your line is now open.

Andrew Nowinski — Analyst

Thank you for squeezing me in. So, just maybe two quick housekeeping questions. First, did the deception products have an impact on the decline in your NRR when it went down to 110 this quarter? And then, second, you gave the cloud and data analytics ARR of 170 back in Q2. And given that it’s a high priority, you know, for your investments, I’m just wondering if you could break those two out again in Q4 here or, perhaps, tell us how much you expect them to contribute to that 200 million in net new ARR for FY ’26.

Thank you.

Tomer Weingarten — Chief Executive Officer

So, we’re not going to be disclosing per product ARR at this point. We will give an update potentially later on in the year. On the NRR front, there was no, I would say, material impact on Q4 NRR. We do expect that that’s going to be a headwind to NRR, the deception, end-of-sale, you know, specifically in Q1.

And I think once we clear that headwind, I think you’ll see NRR maybe in a more healthy place. So, that, I think, kind of is the way that we’re looking at it today.

Operator

I would now like to pass the conference back over to Tomer Weingarten for closing remarks. Tomer, you may proceed.

Tomer Weingarten — Chief Executive Officer

Thank you. We delivered a strong end to fiscal year ’25 and see significant opportunity ahead in fiscal ’26. We continue to lead the industry with best-in-class technology. I’m especially pleased with our AI innovations, which we believe will transform cybersecurity in the coming years.

We’re at the forefront of an AI revolution, driving the next wave of security innovation. Our product and go-to-market strategy are fully aligned to deliver premier AI cybersecurity. And this is driving broader platform adoption among new and existing customers. We’re delivering strong revenue growth and margin expansion and achieved new profitability milestones with more to come.

Thank you again to our customers, partners, shareholders, and Sentinels around the world.

Operator

That will conclude today’s conference call. Thank you for your participation. [Operator signoff]

Duration: 0 minutes

Call participants:

Doug Clark — Vice President, Investor Relations

Tomer Weingarten — Chief Executive Officer

Barbara Larson — Chief Financial Officer

Adam Tindle — Analyst

Brian Essex — Analyst

Gray Powell — Analyst

Annick Baumann — Jefferies — Analyst

John Difucci — Analyst

John DiFucci — Analyst

Jonathan Ho — William Blair and Company — Analyst

Shaul Eyal — Analyst

Zach Schneider — Robert W. Baird and Company — Analyst

Rudy Kessinger — Analyst

Tal Liani — Analyst

Eric Heath — Analyst

Trevor Walsh — Analyst

Andrew Nowinski — Analyst

More S analysis

All earnings call transcripts